20 matches found
CVE-2022-23628
OPA is an open source, general-purpose policy engine. Under certain conditions, pretty-printing an abstract syntax tree AST that contains synthetic nodes could change the logic of some statements by reordering array literals. Example of policies impacted are those that parse and compare web paths...
EUVD-2022-1041
Malicious code in bioql PyPI...
Codesys CmpFiletransfer DoS
The vulnerability of the CmpFiletransfer component in the Codesys industrial automation software suite is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions or exert other adverse effects...
SAP SQL Anywhere Permission DoS
The vulnerability of SAP SQL Anywhere relational database management systems is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker to cause service failures or other adverse effects...
OpenSSL Numerical Overflow DoS
The vulnerability of the OpenSSL library is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker to cause a service failure, or possibly have other adverse effects...
PHP Buffer Overflow DoS
The vulnerability of the signature-verification function in the PHP programming language interpreter arises due to buffer overflow. Exploiting this vulnerability can allow an attacker to cause service failures or potentially have other adverse effects...
a2p Stack Buffer Overflow DoS
The vulnerability of the a2p utility is caused by an overflow of the staticly allocated stack buffer. Exploiting this vulnerability can allow an attacker to cause a service failure or other adverse effects...
Unsafe object creation in json RubyGem
The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through 2.5.7, and 2.6 through 2.6.5, has an Unsafe Object Creation Vulnerability. This is quite similar to CVE-2013-0269/GHSA-x457-cw4h-hq5f, but does not rely on poor garbage-collection behavior within Ruby. Specificall...
CVE-2020-10663
The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through 2.5.7, and 2.6 through 2.6.5, has an Unsafe Object Creation Vulnerability. This is quite similar to CVE-2013-0269, but does not rely on poor garbage-collection behavior within Ruby. Specifically, use of JSON parsi...
CVE-2020-10663
The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through 2.5.7, and 2.6 through 2.6.5, has an Unsafe Object Creation Vulnerability. This is quite similar to CVE-2013-0269, but does not rely on poor garbage-collection behavior within Ruby. Specifically, use of JSON parsi...
Mac OS X File Component DoS
The vulnerability of the Mac OS X operating system’s file component is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure application termination or have other adverse effects...
Google Chrome DoS
The multiple vulnerabilities of the Google Chrome browser are related to code errors. Exploiting these vulnerabilities can allow a malicious actor to cause service failures or other adverse effects...
Google Chrome DoS
The multiple vulnerabilities of the Google Chrome browser are related to code errors. Exploiting these vulnerabilities can allow a malicious actor to cause service failures or other adverse effects...
Google Chrome DoS
The multiple vulnerabilities of the Google Chrome browser are related to code errors. Exploiting these vulnerabilities can allow a malicious actor to cause service failures or other adverse effects...
V8 DoS
The multiple vulnerabilities in the V8 browser kernel are associated with code errors. Exploitation of these vulnerabilities may allow a remote attacker to cause system failures or potentially have other adverse effects...
Google Chrome DoS
The multiple vulnerabilities of the Google Chrome browser are related to code errors. Exploiting these vulnerabilities can allow a malicious actor to cause service failures or other adverse effects...
Google Chrome DoS
The multiple vulnerabilities of the Google V8 browser component in Google Chrome are related to code errors. Exploiting these vulnerabilities could allow a malicious actor to cause service failures or potentially have other adverse effects...
Google Chrome HarfBuzz DoS
The multiple vulnerabilities of the Google Chrome browser and the HarfBuzz text formatting library are related to code errors. Exploiting these vulnerabilities could allow a malicious actor to cause service interruptions or potentially have other adverse effects...
Google Chrome DoS
The multiple vulnerabilities of the Google Chrome browser are related to code errors. Exploiting these vulnerabilities can allow a malicious actor to cause service interruptions or potentially have other adverse effects...